USN-5705-1: LibTIFF vulnerabilities

Chintan Shah discovered that LibTIFF incorrectly handled memory in certain conditions. An attacker could trick a user into processing a specially crafted image file and potentially use this issue to allow for information disclosure or to cause the application to crash. CVE-2022-3570 It was...

macOS 12.x < 12.6.1 Multiple Vulnerabilities (HT213494)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.6.1. It is, therefore, affected by multiple vulnerabilities: - This issue was addressed by removing additional entitlements. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16,...

About the security content of iOS 15.7.1 and iPadOS 15.7.1

About the security content of iOS 15.7.1 and iPadOS 15.7.1 This document describes the security content of iOS 15.7.1 and iPadOS 15.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

PT-2022-21552 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16 watchOS versions prior to 9 Description: The issue allows an app to potentially execute arbitrary code with kernel privileges due to a problem that was addressed with improved memory handling. Recommendations: For iOS...

About the security content of macOS Ventura 13

About the security content of macOS Ventura 13 This document describes the security content of macOS Ventura 13. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

PT-2022-7251 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue is related to a buffer overflow in the Apple Neural Engine component of the macOS operating system, which may allow an attacker to execute arbitrary code with kernel privileges. The problem wa...

About the security content of tvOS 16.1

About the security content of tvOS 16.1 This document describes the security content of tvOS 16.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of macOS Monterey 12.6.1

About the security content of macOS Monterey 12.6.1 This document describes the security content of macOS Monterey 12.6.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

PT-2022-21602

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 16.1 iPadOS versions prior to 16.1 macOS Ventura versions prior to 13 watchOS versions prior to 9.1 Description: The issue was addressed with improved memory handling. An application may be able to execute arbitrary co...

PT-2022-26611 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.1 iPadOS versions prior to 16 macOS Ventura versions prior to 13 Description: The issue was addressed with improved memory handling. An app with root privileges may be able to execute arbitrary code with kernel...

PT-2022-21536 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16 macOS versions prior to 13 Description: The issue allows an app to potentially execute arbitrary code with kernel privileges due to a problem that was addressed with improved memory handling. Recommendations: For iOS...

PT-2022-21528 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16 macOS versions prior to Ventura 13 watchOS versions prior to 9 Description: The issue allows an app to potentially leak sensitive kernel state due to inadequate memory handling. Recommendations: For iOS versions prior...

About the security content of watchOS 9.1

About the security content of watchOS 9.1 This document describes the security content of watchOS 9.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

USN-5570-2: zlib vulnerability

USN-5570-1 fixed a vulnerability in zlib. This update provides the corresponding update for Ubuntu 22.04 LTS and Ubuntu 20.04 LTS. Original advisory details: Evgeny Legerov discovered that zlib incorrectly handled memory when performing certain inflate operations. An attacker could use this issue...

USN-5570-2 zlib vulnerability

USN-5570-1 fixed a vulnerability in zlib. This update provides the corresponding update for Ubuntu 22.04 LTS and Ubuntu 20.04 LTS. Original advisory details: Evgeny Legerov discovered that zlib incorrectly handled memory when performing certain inflate operations. An attacker could use this issue...

Ubuntu: Security Advisory (USN-5680-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Graphics Device Interface Information Disclosure (CVE-2019-1252)

An information disclosure vulnerability exists in the Graphics Device Interface GDI component of Microsoft Windows. The vulnerability is due to improper handling of objects in memory. A remote attacker could exploit the vulnerability by enticing a user to open a specially crafted web page or...

CVE-2022-3171 Memory handling vulnerability in ProtocolBuffers Java core and lite

A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted...

USN-5658-1 isc-dhcp vulnerabilities

It was discovered that DHCP incorrectly handled option reference counting. A remote attacker could possibly use this issue to cause DHCP servers to crash, resulting in a denial of service. CVE-2022-2928 It was discovered that DHCP incorrectly handled certain memory operations. A remote attacker...

USN-5638-1 expat vulnerability

Rhodri James discovered that Expat incorrectly handled memory when processing certain malformed XML files. An attacker could possibly use this issue to cause a crash or execute arbitrary code...